News for hackers. Stuff that matters.

A comment on I've spent the last two years building a new email client. Parent comment

Re:I've spent the last two years building a new email client by qz3 on Wednesday May 02, 2018 @05:07AM (#16975171)
On a desktop app, you can see what kind of request the program makes and which servers it contacts. With a webapp, you'll never know what the app does.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by alimbada on Wednesday May 02, 2018 @05:12AM (#16975197)
You can do the same in your browser by opening the developer tools and in fact it comes built in to the browser whereas on a desktop you'd have to install another app like Wireshark/Fiddler to see those requests.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by stephenr on Wednesday May 02, 2018 @05:24AM (#16975276)
That only tells you what your browser sends to their server. It doesn't tell you what connections their server makes.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by crystaln on Thursday May 03, 2018 @03:15AM (#16983967)
Nothing will. The vulnerability of what happens to your data after it is sent to a third party is the same for any app, web or native.

The biggest difference is that it's way easier to see where you're data is being sent in a browser, since it has built in tools. It's very hard to monitor native app traffic that is sent over SSL.

[ Parent | on HN ]
Re:I've spent the last two years building a new email client by stephenr on Thursday May 03, 2018 @03:23AM (#16984004)
When the app is native there no requirement for a third party server.

You, Your mail (provider) server.

Vs

You, the server hosting the web app, your mail (provider) server.

[ Parent | on HN ]
Re:I've spent the last two years building a new email client by crystaln on Wednesday May 02, 2018 @05:10AM (#16975187)
How so? It's quite simple to tell what a web app does in my understanding. Chrome has many good monitoring tools.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by dillondoyle on Wednesday May 02, 2018 @05:17AM (#16975230)
The webapp can send your data wherever once it has the data, chrome won't log http requests if they were made server to server etc
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by gsich on Wednesday May 02, 2018 @07:28AM (#16975882)
A native application can do that too.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by methyl on Wednesday May 02, 2018 @05:38AM (#16975356)
Isn't it the case for any app?
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by Qwertie on Wednesday May 02, 2018 @09:43AM (#16976761)
The logic is a native app can make a direct IMAP connection to the mail server and you can check it is doing so where as a web app has to send the login details to a server which does IMAP for the client and you can not see this last part.
[ Parent | on HN ]
Re:I've spent the last two years building a new email client by pritambaral on Wednesday May 02, 2018 @06:13AM (#16975524)
> With a webapp, you'll never know what the app does.

Unless you run uMatrix or uBlock Origin (same code in both as far as this feature is concerned), of course.

[ Parent | on HN ]
Re:I've spent the last two years building a new email client by progx on Wednesday May 02, 2018 @08:05AM (#16976114)
Nonsens. Every traffic can be monitored, web app or native app, that is not important.
[ Parent | on HN ]